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Amendments to the Claims 

1 1. (Currently Amended) A system for analyzing a solution including a plurality of 

2 components and for designing security into that solution, the system comprising: 

3 a first system which identifies the security threats for the solution; 

4 a second system which identifies the security properties of the overall solution 

5 based on a set of security functions attributable to defined security subsystems , the 

6 security subsystems further comprising an audit subsystem, an integrity subsystem. 

7 and an information flow control subsystem ? 

8 a third system which is coupled to the second system and which allocates 

9 security properties to the components of the solution based upon the selected functions 

10 which are derived from the nature and number of the security subsystems within the 

11 solution; 

12 a fourth system which is coupled to the third system for allocating the security 

13 properties to the components of the solution and which identifies functional 

14 requirements for the components, in terms of the Common Criteria, in order to comply 

15 with the security properties of the component allocated by the third system! and 

16 a system which is coupled to the fourth system and which documents the 

17 requirements for the security components for the system. 

1 2. (Original) A system for designing security into a solution including the 

2 elements of Claim 1 wherein the second system which identifies security 
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properties of the overall solution includes a component which uses standard 
security subsystems for identifying security properties. 

(Original) A system for designing security into a solution including the elements 
of Claim 2 wherein the standard criteria for identifying security properties 
includes a system which maps functions of standard security subsystems to an 
ISO standard 15408, also known as Common Criteria. 

(Original) A system for designing security into a solution including the elements 
of Claim 1 wherein the system further includes a system which documents the 
solution and the security assumptions using a solution design security 
methodology. 

(Currently Amended) A system for designing security into a solution including 
the elements of Claim 4 wherein the system further includes a system which 
provide the integrity subsystem provides integrity requirements using a 
standard set of criteria. 

(Original) A system for designing security into a solution including the elements 
of Claim 5 wherein the standard set of criteria are in accordance with ISO 
15408. 
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7. (Currently Amended) A method of designing security for a solution in a system 
which includes insecure components, the steps of the method comprising: 
identifying the security threats to the solution; 

determining the security properties by, inter alia, managing audits, managing 
integrity, and managing information flow control of the overall solution; 

assigning selected security properties for the overall solution to components of 
the solution; 

enumerating security requirements for infrastructure, components and 
operations; 

developing integrity requirements; and 

creating at least one functional technology diagram to document security 
requirements for the solution. 

8. (Currently Amended) A method of designing a secure solution including the 
steps of Claim 7 wherein the method further includes the step of ranking the 
security threats to the solution and considering the biggest threats to the 
security properties of the overall solution . 

9. (Currently Amended) A method of designing a secure solution including the 
steps of Claim 8 wherein the step of ranking the security threats to the security 
properties of the overall solution includes the step of doing less for security 
threats not considered substantial threats to the security properties of the 
overall solution. 
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1 10. (Original) A method of designing a secure solution including the steps of Claim 

2 7 wherein the method further includes the step o£ documenting the solution 

3 environment and security assumptions and using the environment and security 

4 assumptions in developing the security properties of the overall solution. 

1 11. (Original) A method of designing a secure solution including the steps of Claim 

2 7 wherein the method further includes the step of developing an integrity 

3 requirements for the solution and using those integrity requirements in the 

4 functional technology diagram (s) for the solution. 

1 12. (Original) A method of securing a solution including the steps of Claim 7 

2 wherein the step of determining the security properties of the overall solution 

3 includes the step of using standard criteria for evaluating the solution. 

1 13. (Original) A method of securing a solution including the steps of Claim 12 

2 wherein the step of determining the security properties of the overall solution 

3 includes the step of using the Common Criteria of ISO Standard 15408. 

1 14. (Original) A method of securing a solution including the steps of Claim 7 

2 wherein the step of enumerating security requirements for infrastructure, 

3 components and operations includes the step of using an industry standard 

4 security criteria. 
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(Original) A method of securing a solution including the steps of Claim 14 
wherein the step of using an industry standard security criteria includes the 
step of using Common Criteria which conforms to ISO Standard 15408. 

(Original) A method of securing a solution including the steps of Claim 7 
wherein the step of enumerating security requirements for infrastructure, 
components and operations includes the step of identifying, enumerating and 
describing a number of standard security subsystems that in total represent the 
security function of the solution. 
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